Skip to content

Andru

io.github.geter-andru/andru-intelligencegeter-andrustreamable-httpv1.10.0Scanned

Revenue intelligence for complex B2B growth.

37 tools: 16 change things and 21 only read.

Tools: 0 delete, 0 irreversible, 16 write, 21 read.
  • Reads private data · 3
  • Reads text others write · 33
  • Can send data out · 0
  • 5 findings

Anlyon alternative

16 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

37 tools

Changes things 16Claude Code: ask
  • assess_company_readinessScores a company's Revenue Readiness Index (0–100) from its operating metrics — stage-fit, confidence, NRR / CAC-payback / pipeline-coverage, and the #1 growth constraint.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Scores a company's Revenue Readiness Index (0–100) from its operating metrics — stage-fit, confidence, NRR / CAC-payback / pipeline-coverage, and the #1 growth constraint. Use it to screen a target or assess a portfolio company. Pass the metrics you have; more metrics = higher confidence. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • batch_fit_scoreScore up to 50 companies at once — gives each a tier and score so you can rank a list in under a second.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Score up to 50 companies at once — gives each a tier and score so you can rank a list in under a second. Returns individual scores plus aggregate statistics.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • classify_opportunityRun a full read on a deal in one call — fit score, persona match, risk flags, disqualification check, and a verdict: pursue, pause, or walk away.Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "classify_opportunity" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run a full read on a deal in one call — fit score, persona match, risk flags, disqualification check, and a verdict: pursue, pause, or walk away. Combines multiple scoring engines for a comprehensive assessment.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • consult_agentConsult one of Andru's domain expert agents in natural language and get a domain-scoped answer (it may call free lookup tools; paid tools must be called directly).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Consult one of Andru's domain expert agents in natural language and get a domain-scoped answer (it may call free lookup tools; paid tools must be called directly). $3 per turn. One consultation turn per call; pass prior turns as `history` to continue. Use `module` to pick the expert (e.g. 'market-clarity', 'deal-acceleration', 'due-diligence', 'portfolio-ops'). Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • generate_assetGenerate an asset from Andru's catalog (find it with list_assets) — e.g.Reads text others writeNo findings

    Why it is in this group

    • The name "generate_asset" says "generate": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Generate an asset from Andru's catalog (find it with list_assets) — e.g. 'Board Presentation', 'Buying Committee Navigation'. Charged at its catalog price (Tool $3, Framework $12, Decision $49); your first ICP is free. Built from everything Andru knows about your company and saved to your Andru library. Takes up to a few minutes: returns a job_id — call get_asset with it to receive the asset as markdown.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • generate_portfolio_briefA brief on your portfolio's go-to-market activity for a period: what Andru's work across your portfolio companies found (targets, opportunities, overlaps), each company's public go…Reads text others writeNo findings

    Why it is in this group

    • The name "generate_portfolio_brief" says "generate": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A brief on your portfolio's go-to-market activity for a period: what Andru's work across your portfolio companies found (targets, opportunities, overlaps), each company's public go-to-market news, and the market signals around their buyers, with sources. Not a financial or performance report. Send the companies (name and website, up to 15) or a portfolioId; with neither, Andru suggests the companies on your firm's website for you to confirm, free. $49, charged only if the brief is saved. Takes a few minutes: returns a job_id; call get_asset with it. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • get_account_planBuilds an account plan for a target company in your Andru account: the buying committee, the opportunities that fit what you sell, the champion to work with, talk tracks and next s…Reads text others write1 finding

    Why it is in this group

    • The name "get_account_plan" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "get_account_plan" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The name "get_account_plan" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Builds an account plan for a target company in your Andru account: the buying committee, the opportunities that fit what you sell, the champion to work with, talk tracks and next steps, from sourced research. Returns the link to the plan with a short summary. $12, charged only if the plan is saved; a plan for the same company from the last 30 days comes back free. Takes 1 to 3 minutes: returns a job_id; call get_asset with it. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • get_pre_briefWrites your pre-call prep so you don't walk in cold — talk track, discovery questions tuned to this buyer, the concerns this buyer is likely to raise and what they need to hear, an…Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "get_pre_brief" says "get": a word for reading.
    • The description's first verb is "write": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • private-dataThe description's first sentence says "meeting": it reads calendars.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "get_pre_brief" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_pre_brief" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Writes your pre-call prep so you don't walk in cold — talk track, discovery questions tuned to this buyer, the concerns this buyer is likely to raise and what they need to hear, and the one thing you need to get done in this meeting. Provide a company name and Andru checks your calendar automatically. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • log_revenue_insightSave a revenue insight, decision, metric or pattern to Andru's memory so it compounds over time.Reads text others writeNo findings

    Why it is in this group

    • The name "log_revenue_insight" says "log": a word for reading.
    • The description's first verb is "save": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Save a revenue insight, decision, metric or pattern to Andru's memory so it compounds over time. Use after a deal decision, ICP refinement, metric update or strategic pivot. Saving an existing key keeps the previous value in its history. Free.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • quoteThe exact price of a call before you make it.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The exact price of a call before you make it. Send the tool name and its arguments. Returns the price, whether today's free calls cover it, the wallet balance, how much this key can still spend without asking, and a quote_id that holds the price for 30 minutes. Pass quote_id with the call to pay the quoted price. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • set_product_contextTell Andru what you sell, once.Reads text others writeNo findings

    Why it is in this group

    • The name "set_product_context" says "set": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Tell Andru what you sell, once. Give your company website (Andru reads it and remembers your product) or a short product description. Every later call uses it, so tools stop asking for product context. Call with no arguments to see what Andru has saved. Free.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: true
  • signup_startCreate an Andru account, or sign in to yours, without leaving your agent.No findings

    Why it is in this group

    • The name "signup_start" says "start": a word for a change.
    Description, as the server wrote it
    Create an Andru account, or sign in to yours, without leaving your agent. Send the person's email. Andru emails them a 6-digit code and an Approve button. If they read you the code, call signup_verify. If they tap Approve, call signup_status with the request_id until it returns your key. They also choose how much you can spend without asking them; it starts at $0 (free calls only). Free.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • signup_statusCheck whether the person has approved you.1 finding

    Why it is in this group

    • The name "signup_status" says "status": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "signup_status" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "signup_status" says "status": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Check whether the person has approved you. Send the request_id from signup_start. Returns "waiting" (ask again after the number of seconds it gives), your API key once they approve (shown once; save it), or "expired". Free.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • signup_verifyFinish signing up: send the email and the 6-digit code the person received.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Finish signing up: send the email and the 6-digit code the person received. Returns an Andru API key for this agent. Free.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • simulate_buyer_personaPrepare for a meeting with the people who'll be in the room.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Prepare for a meeting with the people who'll be in the room. Andru writes a free brief of what each person likely thinks going in, then plays them, one or several at once, asking what your real buyers ask. The brief is free (10 a day). A Deal Prep session is $5 for 25 turns, charged at your first reply. Say "End role-play. How did I do?" for a scored debrief and what to take into the meeting. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
Only reads 21Show 21 read-only tools
  • discover_prospectsFinds real companies likely to buy your product.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Finds real companies likely to buy your product. Searches the web for companies showing they have the problem you solve right now (hiring, launches, funding, expansion) and links the page behind every piece of evidence. Uses the product saved on your account. Takes up to a couple of minutes; nothing is charged if no company has sourced evidence. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_assetCollect an asset started with generate_asset, a brief started with generate_portfolio_brief, or an account plan started with get_account_plan.Reads text others writeNo findings

    Why it is in this group

    • The name "get_asset" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Collect an asset started with generate_asset, a brief started with generate_portfolio_brief, or an account plan started with get_account_plan. While it is building you get its progress; when it is done you get the asset or brief in full as markdown, or the account plan's link and summary (all saved to your Andru account). Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_capability_profileReturns a machine-readable snapshot of what your product actually does and who it's for — capabilities, verified outcomes, trust signals, pricing model, and integrations.Reads text others writeNo findings

    Why it is in this group

    • The name "get_capability_profile" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Returns a machine-readable snapshot of what your product actually does and who it's for — capabilities, verified outcomes, trust signals, pricing model, and integrations. Designed for buyer-side agent evaluation.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_competitive_positioningHow you compare with a specific competitor, from the buyer's point of view.Reads text others writeNo findings

    Why it is in this group

    • The name "get_competitive_positioning" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    How you compare with a specific competitor, from the buyer's point of view. Pass the competitor's features in `competitorFeatures` to get where you overlap, where you're different, and where you're the better fit; without them you get the concerns this buyer is likely to raise. Free. For a written comparison to share, generate the Competitive Positioning Framework with `generate_asset`.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_disqualification_signalsFind out if you're wasting time on a deal that won't close.Reads text others writeNo findings

    Why it is in this group

    • The name "get_disqualification_signals" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Find out if you're wasting time on a deal that won't close. Runs the company through three layers of signal — ICP fit, anti-pattern matching, and churn patterns — and tells you whether to keep investing or walk away.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_evaluation_criteriaScores how well you match what this buyer needs — across pain coverage, outcome clarity, capability fit, and 3 more dimensions.Reads text others writeNo findings

    Why it is in this group

    • The name "get_evaluation_criteria" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Scores how well you match what this buyer needs — across pain coverage, outcome clarity, capability fit, and 3 more dimensions. Returns 0-100 per dimension plus overall alignment score. Pass the buyer's `buyerPainPoints` and `requiredCapabilities`; pain coverage and capability fit are scored against them. Use `get_icp_fit_score` to check whether a company is worth pursuing at all, and this tool once you know what the buyer needs. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_founder_contextEverything Andru knows about this founder in one read: profile, product, and memory grouped as What I Know, Patterns I've Noticed and How You Operate.Reads text others writeNo findings

    Why it is in this group

    • The name "get_founder_context" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Everything Andru knows about this founder in one read: profile, product, and memory grouped as What I Know, Patterns I've Noticed and How You Operate. Use it to prime any revenue conversation. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_founder_wellnessChecks for early signs of burnout from your work days, late nights and meeting load, then gives you a risk score and specific recovery actions.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_founder_wellness" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "meeting": it reads calendars.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks for early signs of burnout from your work days, late nights and meeting load, then gives you a risk score and specific recovery actions. Until Andru has your activity or calendar data, it says the risk is not scored yet.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_icp_fit_scoreTells you in seconds whether the company you're thinking about is worth your time — scores them against who actually buys from you and why, across 5 dimensions.Reads text others writeNo findings

    Why it is in this group

    • The name "get_icp_fit_score" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Tells you in seconds whether the company you're thinking about is worth your time — scores them against who actually buys from you and why, across 5 dimensions. No AI calls, instant results.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_icp_profileReturns everything Andru knows about your ideal customer — all 5 intelligence layers, the 7 critical buyer questions, and the patterns that predict churn.Reads text others writeNo findings

    Why it is in this group

    • The name "get_icp_profile" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Returns everything Andru knows about your ideal customer — all 5 intelligence layers, the 7 critical buyer questions, and the patterns that predict churn. Optionally filter to specific layers.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_market_signalsSurfaces what's moving in your market right now — relevance-ranked industry signals (trends, buyer pain, competitor moves, regulatory/tech shifts, hiring + funding) each with its b…Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_signals" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Surfaces what's moving in your market right now — relevance-ranked industry signals (trends, buyer pain, competitor moves, regulatory/tech shifts, hiring + funding) each with its buyer impact and a recommended action. Use it for deal/market context before a screen, or to time GTM moves.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_memory_historyThe version history of one memory: how a metric, deal stage or priority changed over time.Reads text others writeNo findings

    Why it is in this group

    • The name "get_memory_history" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The version history of one memory: how a metric, deal stage or priority changed over time. Answers "What was my MRR 3 months ago?" or "When did the Acme deal move to negotiation?". Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_messaging_frameworkWords that fit each buyer, by buyer type, channel and funnel stage, adapted to how each person prefers to communicate, so the analytical CTO and the results-driven VP Sales each ge…Reads text others writeNo findings

    Why it is in this group

    • The name "get_messaging_framework" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Words that fit each buyer, by buyer type, channel and funnel stage, adapted to how each person prefers to communicate, so the analytical CTO and the results-driven VP Sales each get a version that fits them. Returns value propositions, answers to the concerns each buyer raises, voice variants and outbound templates. Set `mbtiCategory` for one communication style, or leave it out to get all four. Use `get_persona_profile` to learn who the buyer is, and `get_pre_brief` to prepare for one specific meeting. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_persona_profileLook up who you're actually talking to before the call — what they care about at 7 AM, what they need before they say yes, and exactly how to open.Reads text others writeNo findings

    Why it is in this group

    • The name "get_persona_profile" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Look up who you're actually talking to before the call — what they care about at 7 AM, what they need before they say yes, and exactly how to open. Returns persona details including communication preferences, empathy map and messaging angles.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_portfolio_readiness_rollupA board-ready scorecard of every portfolio company by Revenue Readiness Index — comparable by construction — with aggregates (avg readiness, at-risk count, customer-concentration r…Reads text others writeNo findings

    Why it is in this group

    • The name "get_portfolio_readiness_rollup" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A board-ready scorecard of every portfolio company by Revenue Readiness Index — comparable by construction — with aggregates (avg readiness, at-risk count, customer-concentration risk). For PE/VC operators monitoring a book. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_revenue_memoryQuery this founder's accumulated revenue memory: metrics, deal patterns, account history, decisions and habits Andru has learned over time.Reads text others writeNo findings

    Why it is in this group

    • The name "get_revenue_memory" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Query this founder's accumulated revenue memory: metrics, deal patterns, account history, decisions and habits Andru has learned over time. Filter by category, key pattern or memory type. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_sales_blueprintBuilds everything you need to make your first sales hire — job description, comp structure, interview questions that actually reveal sales ability, 90-day ramp plan, and weekly act…Reads text others writeNo findings

    Why it is in this group

    • The name "get_sales_blueprint" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Builds everything you need to make your first sales hire — job description, comp structure, interview questions that actually reveal sales ability, 90-day ramp plan, and weekly activity targets tied to your ARR goal. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_thesis_matchFinds up to 3 VC firms investing now in companies like yours, each with a recent deal or stated focus and a link to the page it came from (a live web search, about 30 seconds).Reads text others writeNo findings

    Why it is in this group

    • The name "get_thesis_match" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "find" and "web": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Finds up to 3 VC firms investing now in companies like yours, each with a recent deal or stated focus and a link to the page it came from (a live web search, about 30 seconds). For the full investor analysis, generate the Pure Signal Investor Resonance asset. Nothing is charged if no firm has sourced evidence. Charged only when delivered; refunded automatically if it fails. Send an idempotencyKey to retry safely: the same key never charges twice.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • list_assetsSearch Andru's catalog of sales, hiring, fundraising and buying assets — 139 deliverables from email drafts to board decks.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_assets" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "search" and "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "search" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Search Andru's catalog of sales, hiring, fundraising and buying assets — 139 deliverables from email drafts to board decks. Each entry says what it is, the business outcome, its price (Tool $3, Framework $12, Decision $49), whether it needs your own data, and whether it can be generated today. Free. Then call generate_asset with the asset's name.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • preview_companySee what Andru reads about a company from its website before signing up: who it sells to, the buyers who decide, and what the site says versus what those buyers need to hear.Reads text others writeNo findings

    Why it is in this group

    • The name "preview_company" says "preview": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
    Description, as the server wrote it
    See what Andru reads about a company from its website before signing up: who it sells to, the buyers who decide, and what the site says versus what those buyers need to hear. Send the company's website. Takes about a minute: you get a preview_id; call again with it to collect the read. Free, no account needed. If the person signs up with signup_start and this preview_id, the read becomes their first ICP.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • whoamiWhat this API key can do: the account it belongs to, the key's name, how much it can spend today and this month without asking, the wallet balance, and free calls left today.Reads text others writeNo findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    What this API key can do: the account it belongs to, the key's name, how much it can spend today and this month without asking, the wallet balance, and free calls left today. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

5 warn
  • The server marks "signup_status" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "signup_status" says "status": a word for reading.

    What this check looks for
  • The server marks "get_topup_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_topup_link" says "get": a word for reading.

    What this check looks for
  • The server marks "classify_opportunity" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

    What this check looks for
  • The server marks "get_account_plan" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The name "get_account_plan" says "get": a word for reading.

    What this check looks for
  • The server marks "get_pre_brief" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_pre_brief" says "get": a word for reading.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.10.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http andru-intelligence https://mcp-server-andru-intelligence.onrender.com/mcp
claude mcp add --transport http andru-intelligence https://mcp-server-andru-intelligence.onrender.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__andru-intelligence__preview_company",
      "mcp__andru-intelligence__whoami",
      "mcp__andru-intelligence__get_icp_fit_score",
      "mcp__andru-intelligence__get_persona_profile",
      "mcp__andru-intelligence__get_disqualification_signals",
      "mcp__andru-intelligence__get_messaging_framework",
      "mcp__andru-intelligence__get_competitive_positioning",
      "mcp__andru-intelligence__get_capability_profile",
      "mcp__andru-intelligence__get_evaluation_criteria",
      "mcp__andru-intelligence__get_icp_profile",
      "mcp__andru-intelligence__discover_prospects",
      "mcp__andru-intelligence__get_sales_blueprint",
      "mcp__andru-intelligence__get_thesis_match",
      "mcp__andru-intelligence__get_founder_wellness",
      "mcp__andru-intelligence__get_revenue_memory",
      "mcp__andru-intelligence__get_founder_context",
      "mcp__andru-intelligence__get_memory_history",
      "mcp__andru-intelligence__get_market_signals",
      "mcp__andru-intelligence__get_portfolio_readiness_rollup",
      "mcp__andru-intelligence__list_assets",
      "mcp__andru-intelligence__get_asset"
    ],
    "ask": [
      "mcp__andru-intelligence__signup_start",
      "mcp__andru-intelligence__signup_verify",
      "mcp__andru-intelligence__signup_status",
      "mcp__andru-intelligence__quote",
      "mcp__andru-intelligence__get_topup_link",
      "mcp__andru-intelligence__classify_opportunity",
      "mcp__andru-intelligence__get_account_plan",
      "mcp__andru-intelligence__get_pre_brief",
      "mcp__andru-intelligence__batch_fit_score",
      "mcp__andru-intelligence__simulate_buyer_persona",
      "mcp__andru-intelligence__log_revenue_insight",
      "mcp__andru-intelligence__assess_company_readiness",
      "mcp__andru-intelligence__generate_portfolio_brief",
      "mcp__andru-intelligence__consult_agent",
      "mcp__andru-intelligence__generate_asset",
      "mcp__andru-intelligence__set_product_context"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as andru-intelligence. Review it before you use it.

Capability tags behind 33 rules
  • mcp__andru-intelligence__preview_company untrusted-input
  • mcp__andru-intelligence__whoami untrusted-input
  • mcp__andru-intelligence__quote untrusted-input
  • mcp__andru-intelligence__get_icp_fit_score untrusted-input
  • mcp__andru-intelligence__get_persona_profile untrusted-input
  • mcp__andru-intelligence__get_disqualification_signals untrusted-input
  • mcp__andru-intelligence__get_messaging_framework untrusted-input
  • mcp__andru-intelligence__get_competitive_positioning untrusted-input
  • mcp__andru-intelligence__classify_opportunity untrusted-input
  • mcp__andru-intelligence__get_account_plan untrusted-input
  • mcp__andru-intelligence__get_capability_profile untrusted-input
  • mcp__andru-intelligence__get_evaluation_criteria untrusted-input
  • mcp__andru-intelligence__get_icp_profile untrusted-input
  • mcp__andru-intelligence__discover_prospects untrusted-input
  • mcp__andru-intelligence__get_pre_brief private-data, untrusted-input
  • mcp__andru-intelligence__batch_fit_score untrusted-input
  • mcp__andru-intelligence__get_sales_blueprint untrusted-input
  • mcp__andru-intelligence__get_thesis_match untrusted-input
  • mcp__andru-intelligence__get_founder_wellness private-data, untrusted-input
  • mcp__andru-intelligence__simulate_buyer_persona untrusted-input
  • mcp__andru-intelligence__get_revenue_memory untrusted-input
  • mcp__andru-intelligence__log_revenue_insight untrusted-input
  • mcp__andru-intelligence__get_founder_context untrusted-input
  • mcp__andru-intelligence__get_memory_history untrusted-input
  • mcp__andru-intelligence__get_market_signals untrusted-input
  • mcp__andru-intelligence__assess_company_readiness untrusted-input
  • mcp__andru-intelligence__get_portfolio_readiness_rollup untrusted-input
  • mcp__andru-intelligence__generate_portfolio_brief untrusted-input
  • mcp__andru-intelligence__consult_agent untrusted-input
  • mcp__andru-intelligence__list_assets private-data, untrusted-input
  • mcp__andru-intelligence__generate_asset untrusted-input
  • mcp__andru-intelligence__get_asset untrusted-input
  • mcp__andru-intelligence__set_product_context untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.geter-andru/andru-intelligence/verify?hash=3c12d77a2f55a0c71d7260f2bdbc5ebc7f7b41aa56eca221e9dbc3f25c9aec8c" | jq -e '.changed == false'

Pinned hash 3c12d77a2f55, from Oct 23, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.geter-andru/andru-intelligence/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.geter-andru/andru-intelligence
[![anlyon.dev](https://anlyon.dev/badge/io.github.geter-andru/andru-intelligence.svg)](https://anlyon.dev/servers/io.github.geter-andru/andru-intelligence)

Source: MCP Registry · repository. Synced Oct 23, 2026, 12:17 UTC.